Stack Overflow
Stack Overflow

Questions tagged [elytron]

The WildFly Elytron project is a security framework brought to the WildFly application server to provide a single unified security framework.

80 questions
1
vote
1 answer

WildFly and Java EE security configuration with Elytron

I'm trying to become more familiar with WildFly security configuration and have some problems with understanding of relation between options in server side configs like standalone.xml and application side configs like web.xml and jboss-web.xml. I…
Alexey Usharovski
  • 1,404
  • 13
  • 31
1
vote
0 answers

Run EJB with Subject.doAs does not affect EJBContext in Wildfly 15

Since we found out that it is not possible to put the SecurityIdentity into an ContextualProxy as described here we try to find some kind of workaround. We make a programmatic login on the the security subsystem of wildfly and run a Runnable with…
jlange
  • 11
  • 3
1
vote
1 answer

Wildfly Elytron: Principal not available in SimpleSecurityManager

I implemented an authentication mechanism similar to CustomHeaderHttpAuthenticationMechanism in https://github.com/wildfly-security-incubator/elytron-examples/tree/master/simple-http-mechanism, using PasswordGuessEvidence and also the other…
MichaelJ
  • 113
  • 6
1
vote
1 answer

Empty response with Keycloak 3.4.1 on Wildfly 11 + Elytron

I upgraded my application to Wildfly 11 and Keycloak with the new Elytron adapters, but it stopped working. I'm using bearer tokens to authenticate an angular application, I think it's something related to CORS because when I manually remove the…
cristhiank
  • 766
  • 8
  • 15
1
vote
3 answers

Wildfly 11 management integration with KeyCloak over new Elytron subsystem

I would like to integrate security for WildFly 11 management interfaces (management console, web console) with KeyCloak over the new Elytron subsystem. I've been looking the latest documentation for Wildfly 11 and there is chapter Using KeyCloak…
Tomazz
  • 23
  • 6
0
votes
0 answers

Quarkus ldap security authenticating with uid and description instad of userPassword

I am using quarkus-elytron-security-ldap but in this user authentication is based on uid and description instead of userPassword. I was looking for property user_pssword_mapper where I can configure. COuld you please help on this topic? I tried…
Shraddha Kabra
  • 1
0
votes
0 answers

Error when migrating from Jboss-7.4.0 to Jboss-7.4.5

When I am migrating to jboss-7.4.5 from jboss-7.4.0, I am getting this below error when starting my server. 12:53:55,533 INFO [org.jboss.modules] (main) JBoss Modules version 1.9.1.Final-redhat-00001 12:53:58,921 INFO [org.jboss.msc] (main) JBoss…
mohita bansal
  • 1
0
votes
0 answers

How to pass secret to oidc.json

There is in wildfly documentation section with instructions how to setup keycloak oidc authentication. But i don't see how to pass credentials.secret in secure way. I have contenerized wildfly in kubernts. Using env variables seems to be not a…
skoczo
  • 75
  • 1
  • 12
0
votes
0 answers

How to configure Wildfly so that a client will has access to a one bean without a password and to the rest of beans will be required a password?

I have an EJB client that connects to Wildfly 26. How should I configure Wildfly so that the client can access bean A without a password and bean B and C require a password? Hypothetical situation, I connect to the server without logging in, I get a…
ArtRac
  • 37
  • 5
0
votes
1 answer

Domain mode wildfly26 remote slave connection error

I followed this documentation: https://www.mastertheboss.com/jbossas/jboss-as-7/jboss-as-7-domain-configuration/ But after all I used to get this error: wildfly domain mode remote slave WFLYHC0001: Could not connect to remote domain controller…
László Tóth
  • 483
  • 5
  • 15
0
votes
0 answers

Migrate SPNEGO configuration from Wildfly 18 to Wildfly 28

I'm using SPNEGO authentication on Wildfly 18 and now I'm migrating to Wildfly 28 and cannot figure out hot to migrate configuration for SPNEGO. Currently I have this in configuration.xml: …
Chupacabras
  • 392
  • 1
  • 5
  • 20
0
votes
0 answers

How to access an already existing credential-store and retrieving a password in Wildfly-elytron

After my disastrous attempt at (not) installing dependencies, I'm back with a slight problem. I have a credstore created (mycredstore) that has an alias inside with a password I need to retrieve, but whenever Java goes in, it just says that the…
Cpt-Proxy
  • 39
  • 7
0
votes
1 answer

Getting password from Elytron credential-store

I'm using the generic code that has been pasted here a couple of times to get a password from an alias inside a credstore here in elytron: (Do ignore all those sysouts, I can't debug normally so I have to use a logger) String clearTextPswd =…
Cpt-Proxy
  • 39
  • 7
0
votes
0 answers

ELY06017: Usage of BASIC and OIDC authentication in one ear (Widfly Elytron)

I am having an application (ear) hosting those services in Wildfly 26.1.3: myapp.ear : myservlet.war (secured with BASIC authentication in web.xml using the ApplicationDomain) myRest.war (secured with OIDC authentication using…
Georg Raffer
  • 1
0
votes
2 answers

ELY23005: Unable to load OpenID provider metadata

Ours is a wildfly based application. We configured Keycloak OIDC with Elytron. This integration works well in all our environments except this one. On hitting any URL, it returns 403 Forbidden error. On enabling TRACE level, I could see these logs…
Karthik Murugan
  • 1,429
  • 3
  • 17
  • 28
1 2
3
4 5 6